Live data from Hacker News

Bun Rust rewrite: "codebase fails basic miri checks, allows for UB in safe rust"

github.com

331–340 of 366 posts

Re: Bun Rust rewrite: "codebase fails basic miri checks, allows for UB in safe rust"

#331
post #297

Here's the thing: I was first interested in Bun because it was written in Zig. I was interested in Zig because I respected Andrew Kelley's decision-making, and his taste matched my own. I got really excited about Bun for many reasons after that, but they essentially came down to a similar root: the decisions were ones that I respected and would probably have made myself if I had thought of them. I was a little concer…

Bun is really interesting project, but the amount of segmentation faults in issues was too concerning for serious production usage. I guess this is one direction to fix it, but let’s see.

It's inability to be compiled from source without a fork of the zig compiler made it unusable in many corporate environments that require deps all be from source as well (or very hard to integrate at least)

Re: Bun Rust rewrite: "codebase fails basic miri checks, allows for UB in safe rust"

#332
post #316
post #315

Earlier quoted context omitted.

I can understand where you are coming from, but I myself am coming from a quite different place. I'm a long-time Deno fan, and to me Bun was less interesting because a.) it seemed like a much-less-ambitious Deno, and b.) I don't want to learn Zig, so I wasn't likely to try to hack on Bun itself, even just recreationally. But, I warmed up to Bun over the last couple years almost against my own will — trying to maintai…

if they succeed nothing will change for you

If they succeed the software will be more reliable with less memory issues that are very likely significant security issues at least some of the time.

When we've seen linux having a new significant exploit every other day now thanks to LLMs being better at weaponizing memory bugs this seems significant.

Re: Bun Rust rewrite: "codebase fails basic miri checks, allows for UB in safe rust"

#333
post #322

Earlier quoted context omitted.

looking at my recent comment history, this was the only comment i see that qualifies https://news.ycombinator.com/item?id=48136130

I was thinking of https://news.ycombinator.com/item?id=48152395 . If I hadn't seen that one, I probably wouldn't have interpreted the GP this way.

that's a pretty substantive comment imo. it pretty succinctly explains an issue we are having in 2026.

Re: Bun Rust rewrite: "codebase fails basic miri checks, allows for UB in safe rust"

#334
post #315

Earlier quoted context omitted.

I can understand where you are coming from, but I myself am coming from a quite different place. I'm a long-time Deno fan, and to me Bun was less interesting because a.) it seemed like a much-less-ambitious Deno, and b.) I don't want to learn Zig, so I wasn't likely to try to hack on Bun itself, even just recreationally. But, I warmed up to Bun over the last couple years almost against my own will — trying to maintai…

> what if it doesn't suck? > And if it does suck Why not both? How about that: perfectly fine for Anthropic but suck for everyone else.

well to me that would still count as "it sucks"

but sure anthropic might not agree

Re: Bun Rust rewrite: "codebase fails basic miri checks, allows for UB in safe rust"

#335
post #315

Earlier quoted context omitted.

I can understand where you are coming from, but I myself am coming from a quite different place. I'm a long-time Deno fan, and to me Bun was less interesting because a.) it seemed like a much-less-ambitious Deno, and b.) I don't want to learn Zig, so I wasn't likely to try to hack on Bun itself, even just recreationally. But, I warmed up to Bun over the last couple years almost against my own will — trying to maintai…

> and to me Bun was less interesting because a.) it seemed like a much-less-ambitious Deno I don't know, I've followed Deno, and it appeared to me an incredibly low ambition from the get go.

lol — what you're saying doesn't make sense to me, but I'm sure it makes sense to somebody

What I was specifically referring to is Deno (originally) trying to fix the (glaring, fundamental) problems that Node imposes on the world, vs just do them faster.

Re: Bun Rust rewrite: "codebase fails basic miri checks, allows for UB in safe rust"

#336

Here's the thing: I was first interested in Bun because it was written in Zig. I was interested in Zig because I respected Andrew Kelley's decision-making, and his taste matched my own. I got really excited about Bun for many reasons after that, but they essentially came down to a similar root: the decisions were ones that I respected and would probably have made myself if I had thought of them. I was a little concer…

Like many alternative implementations,I forsee Bun losing the little mindshare it has managed to achieve.

I don't have a single reason not to pick nodejs when doing JS.

Re: Bun Rust rewrite: "codebase fails basic miri checks, allows for UB in safe rust"

#337
post #335

Earlier quoted context omitted.

> and to me Bun was less interesting because a.) it seemed like a much-less-ambitious Deno I don't know, I've followed Deno, and it appeared to me an incredibly low ambition from the get go.

lol — what you're saying doesn't make sense to me, but I'm sure it makes sense to somebody What I was specifically referring to is Deno (originally) trying to fix the (glaring, fundamental) problems that Node imposes on the world, vs just do them faster.

Yes, but "fixing some fundamental Node problems" is a low bar, hardly the high mark of ambition now, was it?

And to offer a counter example, something like Dart appeared much more ambitious to me.

Re: Bun Rust rewrite: "codebase fails basic miri checks, allows for UB in safe rust"

#338
post #288
post #286

Earlier quoted context omitted.

What’s the downside? Go does library versioning very well, IMO, but I like to hear other opinions.

The core issue is philosophical. Whether you happen to have public infrastructure which provides a web front-end for your git repository, and what exact server that web front-end happens to be hosted on, ought to be completely incidental to compiling source code. But since you ask, Go is the best example of how this can go terribly wrong in practice, IMO. Here are just a few scattered pain points I've encountered: *…

Thanks, I am lucky to avoid those issues working with go, but now I’m annoyed that those decisions were made, I have honestly never thought about the trouble that assigning URLs as import locators could cause but yea that would be a pain if we ever had to deal with any of that.

Thanks for your time writing that. A blog post would be great.

Re: Bun Rust rewrite: "codebase fails basic miri checks, allows for UB in safe rust"

#339
post #288

Earlier quoted context omitted.

The core issue is philosophical. Whether you happen to have public infrastructure which provides a web front-end for your git repository, and what exact server that web front-end happens to be hosted on, ought to be completely incidental to compiling source code. But since you ask, Go is the best example of how this can go terribly wrong in practice, IMO. Here are just a few scattered pain points I've encountered: *…

Don't forget: * No relative imports. * The `require` directives from the `go.mod` files of your dependencies are always ignored. Those two combined, mean that there's no easy way to fork a dependency. It's doable, but some of the maintenance overhead could have been avoided. We don't even get a `go mod tidy` flag that lets us say, "yes, I understand the risks, just copy any `replace` directives that you find in my de…

Yea I’ve had troubles with relative imports when working on two or more go projects that had to be designed together.

Re: Bun Rust rewrite: "codebase fails basic miri checks, allows for UB in safe rust"

#340
post #335

Earlier quoted context omitted.

lol — what you're saying doesn't make sense to me, but I'm sure it makes sense to somebody What I was specifically referring to is Deno (originally) trying to fix the (glaring, fundamental) problems that Node imposes on the world, vs just do them faster.

Yes, but "fixing some fundamental Node problems" is a low bar, hardly the high mark of ambition now, was it? And to offer a counter example, something like Dart appeared much more ambitious to me.

OK. But without changing programming laguages, "fix some fundamental Node problems" vs "don't fix those problems, just run them faster, and maybe inline the most popular dependencies"...

Surely we can agree that one of those positions is relatively less ambitious?

Post reply on HN